lmkd: add sys_resource
Addresses the following denial / error:
E/lowmemorykiller( 187): Error writing /proc/1148/oom_adj; errno=13
[ 118.264668] type=1400 audit(947231128.209:140): avc: denied { sys_resource } for pid=187 comm="lmkd" capability=24 scontext=u:r:lmkd:s0 tcontext=u:r:lmkd:s0 tclass=capability
Change-Id: Ief2a7ead9cdd8a33e3add111ee99f7a29c12a3f2
diff --git a/lmkd.te b/lmkd.te
index 2d09ce5..8643d91 100644
--- a/lmkd.te
+++ b/lmkd.te
@@ -4,7 +4,7 @@
init_daemon_domain(lmkd)
-allow lmkd self:capability dac_override;
+allow lmkd self:capability { dac_override sys_resource };
## Open and write to /proc/PID/oom_score_adj
## TODO: maybe scope this down?